CVE-2025-20659

The CVE-2025-20659 entry concerns a vulnerability in Modem where improper input validation can cause a system crash, enabling remote denial of service when a UE connects to a rogue base station. Exploitation requires no user interaction and has an adjacent attack vector with no privileges require...

CVE-2026-20432

CVE-2026-20432 affects a MediaTek modem component, where a missing bounds check could allow an out-of-bounds write. The resulting impact is remote escalation of privilege if a UE connects to a rogue base station; exploitation requires user interaction. Patch MOLY01406170 (MSV-4461) is noted. Conn...

CVE-2026-20479

CVE-2026-20479 concerns a vulnerability in a modem where a missing bounds check allows an out-of-bounds read. This can enable remote denial of service when a user equipment (UE) connects to a rogue base station controlled by an attacker, without requiring user interaction or additional execution ...

CVE-2026-20449

CVE-2026-20449 concerns a vulnerability in Modem where a heap buffer overflow can cause a system crash, leading to remote denial of service. Exploitation could occur if a device connects to a rogue base station controlled by an attacker, with no additional execution privileges and no user interac...

CVE-2026-20433

CVE-2026-20433 affects a MediaTek modem component where a missing bounds check enables an out-of-bounds write. This could allow remote escalation of privilege if a UE connects to a rogue base station, with no additional execution privileges required. Exploitation requires user interaction. Public...

CVE-2026-20450

CVE-2026-20450 affects the Modem component. The issue is a crash caused by incorrect error handling, which can lead to remote denial of service if a user equipment connects to a rogue base station controlled by an attacker. No user interaction is required; exploitation is scoped to adjacent acces...

CVE-2026-20502

CVE-2026-20502 affects the vdec (video decoder) component in MediaTek platforms. The root cause is an out-of-bounds write resulting from a missing bounds check , which can lead to local privilege escalation requiring no additional execution privileges and no user interaction. The vulnerability is...

CVE-2026-20504

CVE-2026-20504 affects the MediaTek Modem component, where a missing bounds check can cause a system crash, leading to a remote denial of service . Exploitation requires a User Equipment (UE) to connect to a rogue base station controlled by the attacker, with no additional privileges or user inte...

CVE-2026-20501

MediaTek's vdec (video decoder) is affected by a heap buffer overflow that can cause an out-of-bounds write, enabling local escalation of privilege without requiring any prior execution privileges or user interaction. The vulnerability is rated CVSS 8.4 (HIGH) with impacts to confidentiality, int...

CVE-2026-20503

CVE-2026-20503 affects the Modem component in MediaTek devices. A missing bounds check can cause a system crash, leading to remote denial of service when a user equipment (UE) connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are r...